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heterogeneous information 
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private process definitions. 
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captures interactions among the independent sites. Interactions include communication events in which one site sends a message of a 
known type to another site. Each definition specifies a set of valid sequences of communication events among the participating sites. 
Associated with any public process definition is a set of lower level or private process definitions or modules. The private process 
definition specifies a set of possible local actions that can be executed at the site when that particular public process node is executed 
In the preferred embodiment, the private process definition is defined in terms of constructs such as operating parameters and software 
application interactions. 
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1 A System and Method for Creating, Executing and Maintaining Cross- 

2 Enterprise Processes 

3 

4 Background of the Invention 

5 1 . Field of the Invention 

6 The present invention relates generally to information systems, and in particular to a 

7 system and methods that enable the coordination of activity among distributed information 

8 systems. 
9 

10 2. Description of the Related Art 

1 1 The recent change in the structure of business organizations, from the independent 



12 monolithic entity to multiple interdependent businesses, mirrors a similar evolution in computer 

13 systems from the single mainframe to distributed networks of personal computers and' 

14 workstations. Since computer networks are extremely efficient in communicating information 

15 and performing activities between distributed sites, modern networks should be the obvious 

16 beneficiaries of this revolution in technology. For example, such routine activities as ordering 

1 7 and confirming purchases could be performed automatically between existing systems by a 

1 8 shared computer network. Numerous shortcomings in the state of the art, however, prevent 

1 9 full exploitation of conventional network technology for inter-enterprise purposes. 



20 The most pressing problems presented by the use of shared networks between business 

21 partners are (1) the heterogeneity of the partner computer systems, (2) the heterogeneity of the 

22 data used by the partner systems, (3) communication security and reliability between systems, 

23 and (4) the legal, organizational and cultural boundaries among partners. 

24 With respect to system heterogeneity, organizations often use combinations of operating 

25 systems, middleware systems, and software applications that are incompatible with one another. 

26 Widespread middleware deployment is now underway, but interoperation among the leading 

27 camps has yet to be fully defined. Especially problematic are differences at the application 

28 level, which are fundamental and will continue to challenge implementers for some time. 

29 With respect to the second problem, data heterogeneity, different applications and users 

30 of those applications often represent information in different ways or use different kinds of 
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information to accomplish the same task. These gaps can be particularly significant when the 
applications and their users are distributed among different enterprises. Bridging the associated 
syntactic and semantic gaps in information can require a mixture of transformation capabilities 
as well as neutral objects. 

With respect to the third problem, communication security and reliability, any 
interaction among the systems of a business network requires the presence of reliable and secure 
communication pathways between the participants. The concern for security is especially 
prominent when the Internet is used as a link in the communication pathway, since this medium 
is susceptible to eavesdropping and other, forms of security attacks. 

With respect to the fourth problem, any attempt to automate business processes between 
multiple partners must overcome the numerous non-technical barriers associated with 
management of a project distributed among multiple organizations. These challenges include 
mismatches between project priority and resource allocation, language barriers, time zone 
differences and both corporate and governmental regulations. These challenges limit the levels 
of coordination that are achievable. Any technical solution, therefore, must focus on 
minimizing the scope and complexity of the mutual commitments required to implement the 
solution. 

Currently, there are at least five known methods for extending interdependent processes 
beyond one computer system to other systems connected by conventional computer networking 
resources. The first is the manual approach in which users of multiple computer systems 
communicate information between one another via telephone, fax, or other media. The 
communicated information is then entered by hand into the respective computer systems. The 
manual approach may be used to bridge gaps in automation, but is obviously limited in its 
ability to tightly couple processes among partners in both reliable and efficient manner. 

The second approach, which arose in the era of home-grown mainframe applications, is 
known as Electronic Data Interchange (EDI). EDI is a broadly defined term, but most often 
refers to a particular set of standards, technologies (Value-Added Networks, Direct Dial-ups, 
, mapping software), and practices used for electronic data exchange among companies. In EDI, 
a collection of business information (e.g., a purchase order) may be exported from one 
application system, mapped into a neutral format, transmitted to a partner via a VAN (Value- 
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1 Added Network), mapped by the partner into a format suitable for its application, and imported 

2 into the partner application. Alternatively, direct dialing may be substituted for the VAN. EDI, 

3 however, is generally batch oriented, requires extensive format customization and does not 

4 support processes. 

5 The third approach, used when business requirements do not fit the EDI model, is to use 

6 a custom system designed and implemented to the users* specifications. This approach is 

7 costly, requires a mixture of network programming and system integration tasks, and serves a 

8 specific purpose for specific users only. Furthermore, it is inflexible and difficult to modify. 

9 Recently, two trends in technology have radically changed the ways in which application 

10 systems may be intertwined. As a result, a fourth and fifth approach, as well as an adaptation of 

1 1 EDI, must be added to the three discussed above. The first trend is the rapid expansion of 

12 network infrastructure. The most visible component of this infrastructure is the ubiquitous 

1 3 connectivity provided by the Internet. Nearly all organizations are, or soon will be, connected to 

14 the Internet. Coupled with this connectivity is an expanding set of middleware technologies and 

1 5 services such as distributed object frameworks and message oriented middleware that facilitate 

1 6 more tractable distributed applications and promise far greater interoperability of software 

1 7 components. 

1 8 The second trend involves advances in the enterprise application systems that are used 

19 by companies. Key advances in these systems include development of object interfaces and the 

20 development of workflow/process modeling capabilities. Object interfaces provide a more 

21 flexible and less taxing method of moving information to and from applications than prior 

22 methods such as SQL (Structured Query Language) or file-based interfaces. Several application 

23 vendors now provide the ability to design and implement workflow among different application 

24 modules. This capability allows companies to more easily focus on their business processes and 

25 makes more obvious the need to connect the processes of business partners. 

26 The most visible impact of these trends, and the fourth approach to extending business 

27 interdependency, is the use of the World Wide Web for business-to-business interactions. In 

28 this model, an employee in one business accesses information, such as catalog or shipping 

29 information, pertaining to the business applications of another company by using a standard 

30 Web browser. This approach, however, is ill-suited to many extended enterprise processes that 

3 
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1 require dependent interactions among the application systems of different organizations. 

2 The fifth approach exploits recent middleware technology which makes possible the 

3 creation of high-performance distributed applications that are logically integrated. Though the 

4 same technology may be used to provide interoperation among application suites from different 

5 vendors and among systems at different businesses, significant challenges limit feasibility. 

6 Foremost, employing middleware technology is a programming task that requires significant 

7 programming skill and special understanding of security, synchronization, and other network 

8 issues. The cost of such an endeavor may be justified for the vendor of a distributed application, 

9 but companies wishing to engage in a specific extended enterprise process are unlikely to devote 

10 the capital required to build distributed systems from the ground up. 

1 1 Finally, the adaptation of EDI, referred to as Intemet-EDI, is actually a number of 

1 2 methods that attempt to move the traditional EDI approach discussed above to an Internet 

1 3 transport medium. These methods are motivated by the desire to reduce high transport costs 

14 associated with Value-Added Networks (VAN's). Effectively, these methods diverge very little 

1 5 from traditional EDI. The same message formats, mapping software, and even enveloping 

1 6 constructs are employed. Use of an open network, however, requires additional security, 

1 7 reliability and auditing capabilities that were formerly part of a VAN service. In addition, the 

18 use of these additional services in an open network configuration must be supported by software 

19 at the endpoints of an information exchange. Intemet-EDI, therefore, suffers from key 

20 limitations such as a lack of process support, an unwieldy representation formalism, and an 

21 integration model that does not mesh with new practices. 

22 The approaches above fail to meet the increasing demand to implement between 

23 disparate systems complex, automated processes that are both secure and maintainable. Thus, a 

24 system and method to plan and control extended business interdependency are needed that (1) 

25 focuses specifically on peer-to-peer interactions among existing business application systems, 

26 (2) supports secure and reliable communication, (3) minimizes custom software development, 

27 (4) has functionality to handle heterogeneous data representation formalisms and (5) has the 

28 ability to support complex processes that extend into and out of enterprise applications. 

29 
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1 Summary of the Invention 

2 The present invention is a system and methods for creating, executing, and maintaining 

3 cross-enterprise processes. Cross-enterprise processes are shared automated business processes 

4 or workflows among distributed information systems that include specific provisions for 

5 automation of these processes across organizational boundaries and among heterogeneous 

6 information systems. 

7 The system is comprised of a plurality of independent communicating subsystems called 

8 sites with common capabilities. Each of the sites includes a server with common means of 

9 representing and executing shared process definitions. These sites act in concert in the course of 
10 executing shared inter-system processes. Process execution comprises coordinated inter-sUe 

! 1 message exchanges that are coupled with controlled sequences of actions that are local to each 

12 of the sites. In addition, each site may include any one of a number of applications programs 

13 and operating systems for executing the inter-system processes and internal processes on the 

14 server. 

Automated inter-system processes are represented in the system of the present invention 
in a two-level process model. The top level or public process definition/module captures 
interactions among the independent sites (each typically representing an organizaUon or 
business unit). Interactions include communication events in which one site, designated m the 
public process definition by a node, sends a message of a known type to another srte. The 
public process definition, then, is a logical grouping or directed graph of interdependent 
communication events among a set of site, Each definition specifies a set of valid sequences of 

22 communication events among the participating sites. 

23 Associated with any public process definition is a set of lower level or private process 
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definitions or modules. A separate private process definition is bound to each node m a pubhc 
process. The private process definition specifies a set of possible local actions that can be 
executed at the site when that particular public process node is executed. In the preferred 
embodiment, the private process definition is defined in terms of constructs such as operatmg 
28 parameters and software application interactions specific to the node or site. 
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1 Brief Description of the Drawings < 

2 Figure 1 is a block diagram of an extended enterprise including a plurality of sites 

3 having public process definitions and private process definitions in accordance with the present 

4 invention. 

5 Figure 2 is a graphical representation of a public process definition including node, arcs 

6 and connections between them in accordance with the present invention. 

7 Figure 3 is a flow diagram of the process for executing a private process definition in 

8 accordance with the present invention. 
9 

1 0 Figure 4 is a block diagram of a system in accordance with the present invention. 

1 1 Figure 5 is a flow diagram of a method for distributing a public process definition in 

1 2 accordance with the present invention. 

13 Figure 6 is a flow diagram of a method for the installation of a public process definition 

14 in accordance with the present invention. 

15 Figure 7 is a flow diagram of a method for executing an instance of a specific process 

1 6 type in accordance with the present invention. 

17 Figure 8 is a graphical representation of a display device showing a graphical user 

1 8 interface for editting the public process definition. 

19 Figure 9 is a graphical representation of a display device showing a graphical user 

20 interface for editting the private process definition. 
21 

22 Description of the Preferred Embodiment 

23 Referring to Figure 1, a preferred embodiment of an extended enterprise system 100 is 

24 shown. The extended enterprise system 100 of the preferred embodiment of the present 

25 invention preferably comprises a plurality of sites 101, 102 and 103 installed at distinct 

26 organizations that are coupled by a communications network 104. These sites 101-103 form an 

27 extended enterprise 100 in which the internal processes of each site 101-103 are coupled with 

28 the internal processes of other sites 101-103 via coordinated sequences of information 

29 exchanges. For example, sites 101-103 may be business enterprises that comprise three 

30 elements of a supply chain: supplier, manufacturer and customer. Those skilled in the art, 

31 however, will recognize that the sites 101-103 could for any type of business unit or function, 
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1 that there may be any number of site, and three sites 101 -103 are provided only by way of 

2 example. 

3 Each of these sites 101-103 represents a zone of control and is comprised by a set of 

4 application systems that store information and contain logic for retrieving and modifying that 

5 information. Example applications include ERP (Enterprise Resource Planning) application 

6 suites, Product Data Management (PDM) systems, logistics applications, and advanced planning 

7 systems (APS). 

8 Operation of the present invention includes coordinated sequences of actions within each 

9 site 101-103 that are linked with coordinated sequences of information exchanges among 

10 different sitesl01-103. The actions executed within each site 101-103 include primarily the 

1 1 movement of information into and out of the applications associated with sites 101-103. Each 

12 exchange of information between sites 101-103 is preceded by a sequence of actions within the 

13 sending site and is followed by another sequence of actions within the receiving site. 

14 Accordingly, these site-specific sequences of actions serve as the connections that bind a set of 

15 information exchanges into a single coordinated sequence of interactions. 

16 The possible sequences of local actions and site to site exchanges are specified through a 

1 7 process definition language. This language allows for complex branching and looping logic and 

1 8 can capture constraints that govern the relationships between local action sequences and site to 

19 site exchanges. More formally, the process definition language of the preferred embodiment 

20 includes node and arc elements that are combined with a specific ordering and logic to create a 

21 directed graph (such as depicted in Figure 2 and as will be described below). A single source 

22 node 205-225 and a single destination node 205-225 define each arc element. Each node 205- 

23 225 includes a set of input arcs and associated logic connecting it to antecedent nodes 205-225 

24 and a set of output arcs and associated logic connecting it to consequent nodes 205-225. The 

25 relationship between the input arcs for a given node 205-225 is defined by a logical sentence, 

26 containing possibly nested conjunctive and disjunctive propositional connectives, in which each 

27 arc is represented by a distinct propositional symbol. The output arcs for a given node are 

28 related by a separate logical sentence of equivalent form. Node 201 has no input arcs and is 

29 referred to as an initial node. Nodes 299 that have no output arcs are referred to as terminal 

30 nodes. 
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In the preferred embodiment, a two-level process model is used to represent the 
collection of site-to-site information exchanges and site-specific sequences of actions. A public 
process definition or module 1 16a specifies the relationship between all site-to-site information 
exchanges. The sequence of possible actions within a single site 101, 102, 103, for a particular 
node in a public process definition 1 16a, is specified by a private process definition or module 
1 1 8a, 11 8b, 1 1 8c. Both the public and private process definitions 11 6a, 118a, 11 8b, 1 1 8c are 
built on top of the process definition language with special interpretations for node 205-225 and 
arc elements. In a public process definition 1 16a, each node element represents a specific site 

101, 102, 103 and each arc element represents a message with specific information contents that 
are sent from the site 101, 102, 103, represented by the arc's source node to the site represented 
by the arc's destination node. The graph for a public process can include only a single initial 
node. The public process definition 1 16a, then, is a specification of "who does what when" 
among a set of sites 101-103 for a particular purpose. Each public process definition 1 16a 
specifies a set of valid sequences of communication events among the participating sites 101, 

102, 103. More specifically, the same public process definition 1 16a is provided to each site 
101, 102, 103 having an action in the public process definition 1 16a. As shown in Figure 1, 
each site 101, 102, 103 may have one or more public process definitions 1 16a, one for each 
inter-site process. In a private process definition 1 18a, 1 18b, 1 18c, node elements represent 
specific programmatic actions and arc elements specify the order in which these actions are 
executed. The private process definition 1 18a, 1 18b, 1 18c specifies how sites 101-103 process 
received messages and construct outgoing messages. Moreover, private process definitions 

1 1 8a, 1 1 8b, 1 1 8c specify what happens within a node of public process definition 1 16a. Thus, 
the private process definitions 1 1 8a, 1 1 8b, 1 1 8c include routines and processes that are tailored 
to the particular site 1 0 1 , 1 02, 1 03 to which the private process definitions 1 1 8a, 1 1 8b, 1 1 8c is 
assigned or operates upon. Still more particularly, the private process definitions 1 18a, 1 18b, 
1 18c are designed for interaction using the operating systems, applications and resources of the 
site to which it is assigned. Thus, as depicted in Figure 1 each of the private process definitions 
1 18a, 1 18b, 1 18c is different for each site 101, 102, 103. Nonetheless, when sites 101 , 102, 103 
are similarly configured (e.g., have the same operating systems, applications and resources) the 
private process definitions 1 1 8a, 1 1 8b, 1 1 8c may be used or shared. Those skilled in the art will 
recognize that each site 101, 102, 103 may also include a plurality of private process definitions 
1 18a, 1 18b, 1 18c as depicted in Figure 1 . The plurality of private process definitions 1 18a, 
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1 1 1 8b, 1 1 8c may be for one public process definition 1 1 6a or different public process definitions 

2 116a. 

3 The preferred embodiment models the information contained in the messages sent 

4 between sites 101, 102 and 103 as objects with restricted structure and behaviors. These objects 

5 are data containers whose possible contents are specified by object definitions 120a, 120b, 120c. 

6 In the preferred embodiment, an object definition 120a, 120b, 120c takes the form of an XML 

7 (Extensible Markup Language) DTD (Document Type Definition). This definition specifies the 

8 lexical and grammatical form of all objects of that type. Object definitions 120a, 120b, 120c are 

9 referenced by both public and private process definitions. 

1 0 Referring now to Figure 2, an exemplary public process definition 200 is shown. The 

1 1 public process definition 200 is represented graphically as a flow chart. Figure 2 shows a public 

12 process definition 200 that specifies a set of possible interactions among sites 101-103. Process 

13 200 comprises a set of nodes 205 through 225 and a set of communication events 230 through 

14 250, Each node corresponds with a specific site 101-103, and associated with each node 205 

15 through 225 of public process definition 200 is a private process definition 1 1 8a, 1 1 8b, 1 1 8c. 

16 Figure 3 shows an exemplary private process definition 300 associated with node 210. 

17 Each communication event 230-250 that connects one node to another in a public 

18 process definition 200 represents the exchange of a message of a known object type. For 

19 example, the known objects may be any one of the conventional types of business objects such 

20 as a purchase order object, an confirmation messages object, etc. Such objects 120a, 120b, 120c 

21 are defined in the object definition 120a, 120b, 120c so that each site 101, 102, 103 may use the 

22 object definitions 120a, 120b, 120c as needed to process objects on either the public level or the 

23 private level. In other words, public process definition 200 is a logical grouping or a directed 

24 graph of interdependent communication events 230-250 among the sites 101-103 shown in 

25 Figure 1 . This grouping specifies a set of valid sequences of communication events among the 

26 participating sites 101, 102, 103. Specifically, public process definition 200 describes at 

27 communication event 230 a purchase order sent from site 101 to site 102. This purchase order 

28 is generated by the private process of site 101 associated with node 205. Node 210 is a 

29 branching node, and two communication events, 235 and 240, are produced at that node. 

30 Depending on a specified branch condition, either one of the events occurs or both events occur. 

3 1 The conditions under which these two events trigger are not indicated by public definition 200, 

9 
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1 since they are known only to the site 102. These conditions are contained in private process 

2 definition 1 1 8b associated with node 21 0, and thus site 1 02. Those skilled in the art will also 

3 recognize that the private process definition 1 1 8b may be a set of private process definitions that 

4 correspond to an instance of a public process definition 1 16a. 

5 The occurrence of events 235 and/or 240 causes the execution of the node(s) that 

6 immediately follow and execution proceeds downward on the Figure. Node 225 represents a 

7 branch junction node that can wait for one or all events of a set that connect to it. Following 

8 execution of node 225 the public process terminates at terminal 299. 

9 Associated with each node 205 through 225 of public process definition 200 is a private 

1 0 process definition 1 1 8a, 1 1 8b, 1 1 8c. For example, Figure 3 shows a private process definition 

11 300 associated with node 210. Unlike the public process definition 200, the content of private 

1 2 process definition 300 is determined and known solely by the corresponding site, site 1 02 in this 

1 3 case. Private process definition 300 includes a number of actions 305 through 330 that are 

1 4 controlled according to a specified logic. Possible actions include external business application 

1 5 interactions, script execution, user notification and approval, time delay, output object 

1 6 specification, and sub-process execution. All instances of the private process definition 300 

1 7 have access to the object of type 'Purchase Order' that is contained in communication event 

1 8 230. Any action in private process definition 300 can reference this object. Private process 

1 9 definition 300 is constrained to produce a object either of type 'Acknowledgment' or of type 

20 'Purchase Order' corresponding to communication events 235 and 240 respectively. 

21 Referring now to Figure 3, one exemplary embodiment for a private process definition 

22 300 is shown. Private process definition 300 begins at initiator action 301 that executes after 

23 communication event 230 completes. Those skilled in the art will recognize that the process 

24 would be similar for a variety of other private process definitions such that once the obj ect is 

25 transferred to or received by the site 101, 102, 103, the private definition corresponding to the 

26 node following the communication event is automatically started. Private process 300 continues 

27 to action 305. Action 305 execution entails posting an information block corresponding to the 

28 received purchase order into business application 1 13. Following completion of action 305 

29 execution continues to action 310. Action 310 entails querying business application 1 14 to 

30 determine if the item associated with the Purchase Order of communication event 230 is locally 

3 1 stocked or if the item is outsourced. The result of this query is put into a variable named 
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1 'OUTSOURCED' in a set of variables associated with private process 300. Action 315 is 

2 executed subsequent to action 310. Action 3 1 5 entails an IF-THEN-ELSE conditional test on 

3 the value of OUTSOURCED inside of a script action. Results of this conditional test determine 

4 whether path A or path B is followed subsequent to action 3 1 5 completion. Path A execution 

5 proceeds to action 320, which entails the construction of a object of type 'Acknowledgment' 

6 and its designation as an output of the private process. Path B execution proceeds to action 325, 

7 which entails the construction of a object of type 'Purchase Order' and its designation as an 

8 output of the private process. Paths A and B terminate in action 330, which entails notification 

9 of a designated user via electronic mail of certain status information associated with the running 

1 0 process. This information includes identifying characteristics of the purchase order and results 

1 1 of business application queries. Following execution of action 330, the private process 

1 2 terminates, and control returns to the public process level. The use of such private definitions is 

1 3 particularly advantages because it provides uniform control and regulation of the inter-site 

1 4 processes, while allowing maximum flexibility through the use of private definitions that allows 

1 5 the controller of a particular site to implement the private definition in any number of ways 

1 6 according to parameters, resources, and other constraints for a particular site. 

1 7 Each site of the preferred embodiment includes a combination of components that 

1 8 support the design, implementation and maintenance of public and private processes and the 

1 9 runtime components that support the execution of these processes. Figure 4 shows the preferred 

20 configuration of an example site 1 02 . 

21 The standard site 102 is comprised by a single server 480 and one or more clients 460, 

22 470 that communicate with the server over a network 409. Clients 460 and 470 and server 480 

23 run on separate host computers. Clients 460 and 470 contain graphical user interfaces (GUI's) 

24 465 and 475 respectively. In addition, server 480 includes or has access to database 41 0 and 

25 applications 420 and 430. In the preferred embodiment, database 410 resides on a host 

26 computer that is separate from the one on which server 480 is located.Clients 460 and 470 and 

27 server 480 share common representations of relevant information by interacting over network 

28 409 according to a specified and conventional communication protocol. Such shared 

29 information representations include public and private process definitions, object definitions, 

30 process execution histories, as well as information about other sites with which the site interacts. 

31 Human users 440 and 450 interact with site 102 via client GUI's 465 and 475 to view, create, 
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1 edit, and manage the shared information representations delimited above. For example, users 

2 440 and 450 are able to view and edit graphical representations of public process 200 and 

3 private process 300 on GUI's 465 and 475. Figures 8 and 9 shown a screen shot of the GUIs 

4 corresponding to the public and private process definition described above with reference to 

5 Figures 2 and 3, respectively. 

6 The server 480 of the preferred embodiment is comprised of a middle-tier manager set 

7 482, an execution engine 484, a transport manager 486 and adapters 488 and 489. The middle- 

8 tier manager set 482 controls the access and flow of information between network 409, engine 

9 484, and database 410. In addition, it implements associated application logic, and insures the 

1 0 consistency of information between these elements. With respect to network 409, set 482 

1 1 mediates access to information from concurrently operating clients and other components of 

12 server 480. 

1 3 As discussed in detail below, the installation of public and private processes 200 and 300 

14 requires the prior approval of user 440 or 450. Once this approval is received, it is entered by 

15 the appropriate user into client 460 or 470 via the respective GUI. A local install signal is then 

16 relayed over network 409 to server 480. Manager set 482, acting upon the received signal, 

17 initiates the installation of the process definitions into engine 484. During installation, the 

1 8 execution engine 484 transforms the process definitions it receives into executable state 

1 9 machines which are saved in database 410. This transformation extracts from the public process 

20 definition all nodes connected to arcs involving the target site. The resulting state machine 

21 contains all information necessary for a single site to participate in the execution of the original 

22 public process. Once the installation is complete, manager set 482 provides engine 484 with 

23 any additional information stored in database 410 or received from clients 460 and 470 needed 

24 to perform process execution. Persistence of shared data is maintained by communication with 

25 database 410. 

26 Once the installation of private and public process definitions 200 and 300 is complete, 

27 engine 484 controls their execution.. During execution, the execution engine 484 manages two 

28 key activities: inbound and outbound communication with other sites via transport manager 486 

29 and interactions with applications 420 and 430 via adapters 488 and 489. The engine 484 also 

30 manages through manager set 482 several auxiliary activities including the sending and 
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1 receiving of messages to and from users 440 and 450 and the storage of log information in 

2 database 410. 

3 During the execution of a public process definition, such as definition 200, transport 

4 manager 486 manages communications to and from Internet 1 04. For example, public process 

5 definition 200 anticipates the reception of purchase order 230 and acknowledgment 245 by site 

6 1 02, as well as the sending of acknowledgment 235 and purchase order 240. In this capacity, 

7 manager 486 preferably handles retry and acknowledgment logic (based on the properties of the 

8 service it is using). Messages are created outside of any specific transport service and 

9 communication security is message based. Non-repudiation receipts for both origin and 

10 delivery are supported. 

1 1 During execution, adapters 488 and 489 mediate the flow of data between the execution 

12 engine 484 and external applications 420 and 430.For example, referring to step 3 1 5 of private 

1 3 process definition 300, engine 484 may transmit a request through adapter 488 or 489 that 

1 4 application 420 or 430 determine whether the item in question is outsourced. In turn, the 

1 5 application will respond through the respective adapter. Adapter configuration options for 488 

1 6 and 489 are set by authors of private processes for the associated site. These adapters 488 and 

1 7 489 communicate their acceptable configuration options to the middle-tier manager set 482 at 

1 8 the time of their installation. The configuration interface for adapters 488 and 489 allows a 

1 9 private process to insert data into an external application, retrieve data from an external 

20 application or listen for a specific event produced by the external application, where the 

21 inserted, retrieved or listened for data is represented by an object definition. Adapters 488 and 

22 489 also insure uniform properties of state/consistency management and auditing behavior 

23 across the different applications that can be integrated with the system. During process 

24 execution, adapters 488 and 489 map the insertion, retrieval and listened for actions specified in 

25 a private process into specific interactions with target applications 420 and 430. 

26 Operation of a site of the preferred embodiment revolves around the life cycle of a 

27 public process definition and the associated private process and object definitions. Shown in 

28 figure 5, this cycle begins with the creation of a public process definition and referenced object 

29 definitions then continues with the distribution of the public process definition and object 
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1 definitions, creation of the necessary private process definitions, installation of the process, and 

2 ends with process execution. 

3 In step 502, the user creates a public process definition. The site at which the public 

4 process definition 200 is created is referred to as the authoring site. Creation of the public 

5 process definition 200 includes the creation of all object definitions that represent site-to-site 

6 messages in the public process definition. In the preferred embodiment, both public process and 

7 object definitions are created by users 440 and 450 interacting with manager set 482 through 

8 client GUI's 465 and 475. During creation of public process definition 200, for example, user 

9 440 specifies the sequence of interactions among all participating sites 101, 102 and 103 and the 

1 0 logic connecting these interactions. In this example, GUI 465 would present definition 200 as a 

1 1 set of icons interconnected by flow indicators that would appear much as the diagram in figure 

12 2. Definitions for the purchase order, acknowledgment and rejection objects would also be 

13 created by user 440 via GUI 465 if they did not pre-exist. 

14 After the public process and necessary objects have been defined, the user proceeds with 

15 distribution of the process. In step 504, the authoring site sends over the internet 104, the 

16 authored public process definition and referenced object definitions to all sites participating in 

1 7 the public process. Those skilled in the art will recognize that internet 104 may be a intranet on 

18 a local area network (LAN), an internet on a wide area network (WAN), or the Internet. In this 

19 case, site 102 is the authoring site and sites 101 and 103 are the participant sites. In order for 

20 site 102 to send public process definition 200 and associated object definitions over the Internet, 

21 the definitions are sent from manager set 482 to transport manager 486 and from there to the 

22 transport managers of the participant sites. Upon receipt of public process definition 200 and 

23 object definitions by the participant site transport managers, in this case sites 101 and 103, the 

24 definitions are passed from the transport manager to the middle-tier managers for persistent 

25 storage in the site database. After reviewing received public process definition 200 and object 

26 definitions via a client GUI, users at the participant sites 101 and 1 03 must approve or 

27 disapprove the public process definition, said approval or disapproval being sent via the 

28 transport managers of the partner sites to the authoring site. While public process definition 200 

29 is being reviewed at participant sites 101 and 103, authoring site 102 waits for the approval or 

30 disapproval votes to be received by transport manager 486 in step 508. The approval or 

31 disapproval by sites 101 and 103 is likely to turn on commercial, rather than technical, concerns. 

14 



BNSDOCID: <WO 9833125A1 L> 



PCT/US98/01403 

WO 98/33125 



1 

2 
3 
4 

5 
6 

7 



If a partner site finds the commercial arrangements described in definition 200 acceptable, it 
returns an approval signal to the authoring site, in this case site 102. In step 508, the system 
tests for universal approval, if either participant site 101 or 103 disapproves of public process 
200, authoring site 102 will distribute an abort message through transport manager 486 to 
partner sites 101 and 103, thus reaching step 510. In this case, public process definition 200 is 
abandoned and sites 101, 102 and 103 may start negotiating for a new public process defirnfcon. 
If the public process definition is universally accepted in step 508, the authoring site 102 
8 distributes a commit message to each of the partner sites . 

After the commit messages have b.een transmitted by the authoring site and received by 
the participant sites, both the authoring site and participant sites proceed with creation of the 
private processes associated with the public process nodes owned by each site. This is 
represented by step 514 in figure 5. Each site user creates a private process definition for each 
node of the public process definition associated with the user's site. For example, user 440, 
creates private process definition 300 for node 210 and an accompanying private process 
definition for node 220, since nodes 210 and 220 are each associated with site 102. Likew 1S e, a 
user at site 101 would create private process definitions for nodes 205 and 225, while a user at 



9 

10 
11 
12 
13 
14 
15 
16 

17 site 1 03 would create a definition for node 2 1 5 

1 8 After successfully implementing the necessary private process definitions, each 

19 
20 
21 
22 
23 
24 
25 

26 installation process (step 520). 

27 Process installation (step 520) begins with the authoring site sending installation 



participant site sends a message to the authoring site signally the completion of private process 
implementation. In step 516, the authoring site gathers private process completion s lg nals from 
all sites. Ifanysite fails to implement one or more private processes, it will send a failure 
message to the authoring site. In this case, the implementation process will be aborted (step 
518), and process definition 200 will be abandoned. Once the authoring site has recetved 
messages from all participant sites indicating successful private process implementation, and 
has successfully implemented its own private processes, the authoring site can begin the 



28 
29 
30 
31 



messages to all participant sites. After receiving the installation message, each participant ate 
locally installs the public process. Figure 6 shows a flow diagram of a process for instalhng at a 
single site the private process definitions associated with a public process definition. In step 
602, the public process definition and associated private process definitions are passed from 
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1 manager set 482 to execution engine 484. In step 604, the public process definition is compiled 

2 to produce a state machine that contains states only for the site in question. For example, the 

3 process of compiling public process definition 200 at site 102 will result in states associated 

4 with nodes 210 and 220. Recorded in the state machine is a triggering event for each state. 

5 Continuing with the example of public process definition 200, site 102 records that event 230, a 

6 purchase order from site 101 , triggers the state associated with node 210, and that event 245, an 

7 acknowledgment from site 103, triggers the state associated with node 220. In step 606, each 

8 state of the state machine is bound by a "call" command with an associated private process 

9 definition. For example, site 102 will bind private process definition 300 with the state 

10 associated with node 210. The result of this binding is that when the state associated with node 

11 210 is triggered by a purchase order from site 101, private process definition 300 is called and 

12 executed. In step 608, a determination is made as to whether the site in question is the initiator 

13 of the public process. If not, as in the example of site 102, the execution engine determines the 

14 triggering message to be received and registers it in the transport manager. In the example of 

1 5 site 102, the two triggering messages are purchase order 230 from site 101 and acknowledgment 

16 245 from site 103. If the site is the initiator of a public process, the triggering event for the first 

17 . private process is internal to the site and is registered in step 612 as an event trigger, a scheduled 

1 8 startup, or as a subprocess trigger. 

19 After successfully installing the public process, each participant site sends an installation 

20 confirmation message back to the authoring site. In step 522, the authoring site collects 

21 installation confirmation messages from all participant sites. If any site is unable to install the 

22 public process, the process is aborted 524 as described above. Successful installation at the 

23 authoring site triggers the transmission of messages to all participants indicating that the public 

24 process has been installed at all involved sites. At this point the process is ready for execution 

25 (step 526). 

26 As discussed above, the execution of a public process is actually performed by the 

27 interactive executions of the associated private processes at the partner sites. The execution of 

28 an installed public process by a single site is shown in figure 7. Execution begins in step 702 

29 with an initiating event that can include the following: receipt of a message from a partner site, 

30 an event associated with an application, a scheduled startup, or a subprocess trigger. For 

31 example, node 210, of public process definition 200, is triggered by the receipt of a purchase 

16 
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1 order message from site 101 . In step 704, the execution engine at the triggered site creates an 

2 instance in the appropriate state machine and sets the machine to the initial state. In step 706, 

3 the execution engine fetches the private process associated with the associated public process 

4 node. For example, upon the triggering of node 210, private process definition 300 is accessed. 

5 In step 708, the execution engine passes appropriate data including the contents of the event 230 

6 to the private process and initiates its execution. In step 710, the private process executes and 

7 returns data to the execution engine, and in step 712, the execution engine acts upon the basis of 

8 the returned data. For example, private process 300 returns to execution engine 484 either an 

9 instruction to send an acknowledgment to site 101 or a purchase order to site 103. It is noted 

10 that during the execution of the private process in step 710, engine 484 may make use of 

1 1 applications 420 and 430. Execution engine 484 responds accordingly. In step 714, a 

12 determination is made by the execution engine as to whether a local terminal state of the public 

13 process definition has been reached. /This determination is a local determination and is limited 

14 to the participation of the site in the public process. For example, the completion of node 220 is 

15 a local terminal state for site 102, since it is the final node in process 200 that corresponds with 

16 site 102. Likewise, depending on the outcome of the accompanying private process, the 

17 completion of node 210 may be a local terminal state for site 102. If local termination is 

18 encountered, the public process ends for the site in step 716. Step 716 is not complete until a 

19 two-phase commit protocol has been executed among sites 101, 102, and 103 ensuring mutual 

20 completion of process 200 execution. 

21 If the local terminal state is hot encountered in step 714, the transport manager waits for 

22 triggering messages from partner sites (step 718). For example, if the result of node 21 0 is the 

23 transmission of a purchase order in event 240, transport manager 486 waits for the 

24 acknowledgment of event 245 to trigger the private process associated with node 220. Once the 

25 triggering message is received in step 720, the execution engine looks up the associated process 

26 state in step 722. The private process then begins execution at step 706 and is performed as 

27 described above. 
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1 WHAT IS CLAIMED IS: 

2 1 . A method for coordinating a process between a first site and a second site using a 

3 public process definition comprised of a first node associated with the first site, a second node 

4 associated with the second site, and an arc connected to the first and second nodes, comprising: 

5 executing the first node of the public process definition at the first site by executing a 

6 first private process definition associated by shared information with the first 

7 node; and, 

8 upon receiving the message defined by the arc, executing the second node of the public 

9 process definition at the second site by executing a second private process 
10 definition associated by shared information with the second node. 

11 

12 2. The method of claim 1, wherein the arc is a business object. 
13 

14 3 . The method of claim 2, further comprising: 

15 at the first site, creating the public process definition; 

1 6 distributing the public process definition to the second site; 

17 at the first site, associating with the first node by shared information a first private 

1 8 process definition containing an action preceding the transmission of the message 

19 from the first site; and, 

20 at the second site, associating with the second node by shared information a second 

21 private process definition containing an action following the reception of the 

22 message by the second site. 
23 

24 4. The method of claim 3, wherein the step of distributing further comprises: 

25 reviewing the public process definition at the second site; and, 

26 in the event of an approval of the public process definition at the second site, 

27 transmitting an approval signal from the second site to the first site; and, 

28 in the event of a disapproval of the public process definition at the second site, 

29 transmitting a disapproval signal from the second site to the first site. 
30 

31 5. The method of claim 4, wherein the step of distributing further comprises: 

32 in the event of receiving at the first site an approval signal from the second site, 
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1 transmitting a commit message to the second site; 

2 installing the public process definition and the first private process definition at the first 

3 site; and, 

4 in the event of receiving at the second site the commit message from the first site, 

5 installing the public process definition and the second private process definition 

6 at the second site. 
7 

8 6. The method of claim 5, wherein the step of distributing further comprises: 

9 in the event of receiving at the first site a disapproval signal from the second site, 
10 transmitting an abort message to the second site. 

11 

12 7. The method of claim 3, further comprising: 

13 at the first site, transforming the public process definition into a first state machine; and, 

14 at the second site, transforming the public process definition into a second state machine. 
15 

16 8. The method of claim 3, further comprising: 

17 recording in a first process execution history the execution of the first node of the public 

1 8 process definition; 

19 recording in a second process execution history the execution of the second node of the 

20 public process definition; 

21 auditing the first and second process execution histories. 
22 

23 9. A method for coordinating a process between a first site and a second site, 

24 comprising: 

25 creating at the first site a public process definition including a first node associated with 

26 the first site, a second node associated with the second site, and an arc interposed 

27 between the first node and the second node; 

28 distributing the public process definition to the second site; 

29 creating at the first site a first private process definition associated by shared information 

30 with the first node and in which an action preceding the transmission of the 

3 1 message from the first site is defined; 

32 creating at the second site a second private process definition associated by shared 
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1 information with the second node and in which an action following the reception 

2 of the message by the second site is defined; 

3 executing the first node of the public process definition by executing the first private 

4 process definition at the first site; and, 

5 upon receiving the message, executing the second node of the public process definition 

6 by executing the second private process definition at the second site. 
7 

8 10. A method for creating a process definition governing a process between a first site 

9 and a second site, comprising: 

10 creating at the first site a public process definition including a first node associated with 

1 1 the first site, a second node associated with the second site, and an arc interposed 

12 between the first node and the second node; 

1 3 distributing the public process definition to the second site; 

14 creating at the first site a first private process definition associated by shared information 

1 5 with the first node and in which an action preceding the transmission of the 

16 message from the first site is defined; and, 

1 7 creating at the second site a second private process definition associated by shared 

1 8 information with the second node and in which an action following the reception 

19 of the message by the second site is defined. 
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